worked poc

This commit is contained in:
Mateusz Gruszczyński
2026-08-14 11:33:01 +02:00
parent adfdb0b86c
commit fc3a2944b2
94 changed files with 2931 additions and 3412 deletions
+27 -6
View File
@@ -8,6 +8,8 @@ from datetime import datetime, timezone
from urllib.parse import urlparse
from .config import Config
from .maintenance import storage_info
from .rules import RuleManager
from .state import RuntimeStats
from .store import AlertStore
from .webui import WebServer
@@ -33,7 +35,7 @@ def _seed_demo_alert(store: AlertStore) -> None:
"dest_port": 443,
"proto": "TCP",
"alert": {
"signature_id": 1000001,
"signature_id": 1001999,
"signature": "DEV MODE SAMPLE ALERT",
"category": "Development/Test",
"severity": 2,
@@ -64,8 +66,12 @@ def main() -> int:
_seed_demo_alert(store)
routeros_host, routeros_port = _routeros_target(cfg)
rule_manager = RuleManager(cfg, pid_provider=lambda: None, suricata_available=False)
def health() -> dict:
db = store.database_info()
storage = storage_info(cfg.db_path, cfg.eve_path)
rules = rule_manager.status()
return {
"status": "development",
"mode": "web-only-development",
@@ -77,6 +83,9 @@ def main() -> int:
"suricata_pid": None,
"auto_block": False,
"routeros_configured": False,
"database": db,
"storage": storage,
"rules": rules,
"services": {
"web": {
"name": "Web UI / API",
@@ -103,6 +112,21 @@ def main() -> int:
"status": "disabled",
"details": "EVE watcher is not started in web-only development mode",
},
"database": {
"name": "SQLite database",
"status": "up",
"details": f"{db['path']}; {db['rows']} incidents; WAL={db['journal_mode']}",
},
"storage": {
"name": "Persistent storage",
"status": "up",
"details": f"{storage['path']}; {storage['used_percent']}% used",
},
"rules": {
"name": "Managed rules",
"status": "disabled",
"details": "Editors are visible, but Suricata validation/reload requires full mode",
},
"routeros": {
"name": "RouterOS REST integration",
"status": "disabled",
@@ -138,7 +162,7 @@ def main() -> int:
"runtime": stats.snapshot(),
}
web = WebServer(cfg, store, health)
web = WebServer(cfg, store, health, stats=stats, rule_manager=rule_manager)
def request_stop(_signum=None, _frame=None) -> None:
stop_event.set()
@@ -147,10 +171,7 @@ def main() -> int:
signal.signal(signal.SIGINT, request_stop)
web.start()
print(
f"[dev] web-only mode active at http://{cfg.web_bind}:{cfg.web_port}",
flush=True,
)
print(f"[dev] web-only mode active at http://{cfg.web_bind}:{cfg.web_port}", flush=True)
try:
while not stop_event.is_set():